Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: 4s3Pqux00wDMpWxxLqbHccby8YvNhjUm+dLO2ize9K0=
Subject key identifier: 9D:BB:F0:30:0F:61:DB:3B:FD:E7:00:0D:7A:84:A8:47:98:69:B6:2E
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01A0CA47CA494046DB3487283D5467DAF98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 1122
Signing time: Tue 22 Sep 2026 18:01:37 +0000
Manifest this update: Tue 22 Sep 2026 18:01:37 +0000
Manifest next update: Wed 23 Sep 2026 18:01:37 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: AkXj731yorERSEm6Z3LIAkNkpUrkAUbPCmhEYMv2/04=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ca:49:40:46:db:34:87:28:3d:54:67:da:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Sep 22 18:01:37 2026 GMT
Not After : Sep 23 18:01:37 2026 GMT
Subject: CN=9dbbf0300f61db3bfde7000d7a84a8479869b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:6d:55:21:0d:a5:e1:a5:b8:b6:35:73:44:
9a:99:f8:30:9b:01:d9:72:7d:dc:73:a9:04:13:61:
ad:42:c0:70:fa:c8:10:57:fb:60:74:3f:58:ba:90:
13:3a:4d:1e:ba:16:be:5a:c9:e9:73:72:64:17:82:
cf:54:4e:2a:8d:cf:3e:86:8a:75:9c:3d:24:0e:be:
a7:8a:22:19:1b:d5:56:ce:b0:1c:03:a5:69:fc:ab:
34:41:26:6d:08:39:81:de:12:87:1d:3b:86:da:72:
d8:59:d3:52:18:f0:b9:45:d0:77:5d:23:87:3a:33:
b6:89:47:90:82:14:44:d9:bb:af:82:c4:b3:73:e6:
27:53:90:a2:23:24:45:23:87:24:9b:e8:50:13:2f:
fa:fe:e2:90:45:bc:0a:69:1f:19:16:45:6a:0a:f2:
64:58:c3:8f:b5:f8:0d:e3:ef:b2:78:6a:62:36:59:
bc:cc:be:16:1d:ff:1e:b0:60:98:5b:4e:b4:98:40:
13:ee:82:f3:a3:1c:86:47:c0:11:db:04:45:40:46:
d4:c4:e5:25:b9:da:29:e2:3d:ce:67:bf:20:f5:75:
f2:37:e0:f2:6a:fc:1f:9c:26:7c:81:cd:be:b3:45:
93:85:fb:5b:2d:ab:97:b9:8b:16:c3:f3:94:08:88:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:F0:30:0F:61:DB:3B:FD:E7:00:0D:7A:84:A8:47:98:69:B6:2E
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:de:6a:db:91:75:8c:1e:cf:e5:f7:d6:53:65:0b:29:a2:8b:
bf:73:db:ca:14:45:1d:1b:3c:40:6d:e1:e0:d3:7c:51:a2:12:
e8:31:8b:96:c7:b8:3a:de:90:d8:dd:99:d1:1d:85:93:84:7f:
57:e4:2d:49:64:e0:0d:40:4b:84:1e:34:fc:bb:e8:45:54:3a:
35:49:08:86:ed:51:d2:97:ca:43:f3:1c:ec:68:55:77:92:4b:
85:5b:a4:46:77:f9:28:18:6c:13:a2:2f:95:22:0f:13:0c:5e:
5c:39:8a:60:8f:e8:31:dd:45:e1:36:1f:11:40:2e:ed:22:e6:
c7:51:bf:aa:04:52:9d:69:f6:2c:9c:2d:f2:5a:04:46:8f:64:
ec:16:62:80:90:3e:01:7d:c7:7c:22:69:b7:25:f0:18:43:9d:
d1:25:53:69:2c:c7:b5:dc:93:9d:7d:18:4b:67:42:37:84:27:
45:19:dd:9d:81:3f:f3:bd:23:49:03:10:b1:63:a5:f9:6e:01:
ee:d5:f3:e7:f7:ff:1f:f0:59:f8:65:45:7a:eb:8c:df:b8:b7:
34:b7:e8:f0:3b:37:b6:46:4e:64:7c:91:b3:b3:e7:d9:cd:0d:
5f:ef:7b:10:87:8d:90:05:f8:3c:9c:fe:14:82:3a:e4:33:bf:
49:f1:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:34:37 2026 by rpki-client